Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/KetPc-BkafXLAxl_IOQykXLVQgQ.roa
File: KetPc-BkafXLAxl_IOQykXLVQgQ.roa (raw, json)
Hash identifier: GPl1FmUmIsFXjPbWF/skj6EI7chCyT/v2ACKPoXa/YY=
Subject key identifier: 29:EB:4F:73:E0:64:69:F5:CB:03:19:7F:20:E4:32:91:72:D5:42:04
Certificate issuer: /CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Certificate serial: 018570303B5CC46DF25A74B3342E9FB5FB6C
Authority key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/KetPc-BkafXLAxl_IOQykXLVQgQ.roa
Signing time: Mon 02 Jan 2023 01:54:47 +0000
ROA not before: Mon 02 Jan 2023 01:54:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15870
IP address blocks: 91.216.46.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:3b:5c:c4:6d:f2:5a:74:b3:34:2e:9f:b5:fb:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Validity
Not Before: Jan 2 01:54:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=29eb4f73e06469f5cb03197f20e4329172d54204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7e:77:e1:8f:ad:b9:3d:fd:47:e4:a9:f5:87:
93:ae:1d:46:ad:50:f6:8c:7c:d1:08:2e:18:8f:01:
d7:f1:d5:3f:cd:f2:da:a6:90:5a:65:fe:9f:3e:2d:
4f:91:fc:3c:fb:87:cc:60:e8:a4:1e:fc:3c:d3:9d:
29:2b:52:35:93:be:1a:31:d2:20:7b:ac:11:61:e3:
25:dd:9d:e3:e7:54:be:9a:3f:7b:40:1b:0f:09:ba:
74:0b:11:6e:b8:70:70:92:7f:31:95:de:10:f8:91:
94:a3:a1:99:bd:37:aa:3b:45:45:f2:e3:5b:19:ae:
69:ec:c7:02:05:95:a2:7e:9c:65:55:c1:65:78:cc:
e7:10:06:ba:aa:a3:d0:4d:69:37:6d:a0:04:4d:bc:
9a:32:2f:40:6b:74:50:00:e1:da:0d:30:44:90:21:
8a:47:61:45:7b:ac:81:88:6a:3f:67:52:1e:a4:6e:
3c:92:31:8c:58:19:fc:3f:c4:b8:95:ef:9a:dc:47:
92:0d:e1:a2:d2:2b:70:45:73:a2:27:16:66:fd:15:
8d:17:c9:27:51:e5:56:e8:b5:2c:91:2c:ac:03:b3:
04:5b:18:ed:16:98:1a:c8:f7:b2:9e:1b:02:86:21:
bf:c7:ea:d5:4c:c5:09:34:29:f2:a4:c0:f1:17:6d:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EB:4F:73:E0:64:69:F5:CB:03:19:7F:20:E4:32:91:72:D5:42:04
X509v3 Authority Key Identifier:
keyid:73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/KetPc-BkafXLAxl_IOQykXLVQgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.46.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:0d:df:c3:b1:50:fc:40:1b:75:02:e5:6e:49:a3:12:39:9d:
a3:13:b8:9d:63:ec:76:5c:f0:2b:1f:6f:35:96:99:a3:bd:d1:
99:51:13:88:a0:22:35:a2:39:8a:ef:d4:f0:cc:3a:01:6c:f6:
57:60:88:01:d1:5e:a8:1f:7e:a6:3d:e7:05:dc:62:70:41:f7:
62:36:3c:83:a1:02:23:c8:e0:c0:82:95:45:90:5a:4b:66:7d:
10:c8:bf:72:63:bd:52:50:8a:c1:e0:c2:19:91:f3:f6:69:e4:
a2:10:87:01:9a:76:cf:5a:1d:d1:48:d6:f7:83:cd:16:60:fb:
3f:18:d6:19:dc:6e:ab:98:60:de:e0:62:79:df:5e:3d:86:ef:
b5:d9:e0:92:9b:83:0d:7f:31:1d:f2:e6:80:47:98:07:a1:2d:
e2:82:a0:10:d5:a2:39:cf:cc:32:45:20:c2:4e:b3:1d:e9:8b:
27:71:31:41:e8:a4:16:a4:9a:89:02:91:50:c9:b2:eb:2b:a2:
d0:b7:d5:41:72:36:ae:8f:38:5f:9e:ec:33:1a:54:cd:66:c9:
9d:8a:26:fb:1f:98:12:5b:14:17:3a:7f:93:97:f4:14:e3:50:
95:b1:b3:88:af:96:a7:a2:d8:a8:4f:f4:34:86:af:06:72:90:
9b:f4:54:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 08:10:22 2024 by rpki-client on console-fra.rpki-client.org